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ACCESS-PROTECTED PROGRAMMABLE INSTRUMENT 
SYSTEM RESPONSIVE TO AN INSTRUMENT-PASS 

This application claims the benefit of U.S. Provisional Application No. 60/448,204 filed 
February 18, 2003, the contents of which is incorporated herein by reference. 

FIELD OF THE INVENTION 

Electronic instruments, and in particular, programmable instruments. 

5 BACKGROUND OF THE INVENTION 

Many digital instruments, such as gauges, include programmable parameters or features 
that may be modified by the user. To eliminate inadvertent modifications and intentional 
tampering with and protect these programmable features, access to these features needs to be 
restricted to authorized individuals. Previous attempts to provide this needed protection have 

10 included the use of a cumbersome system of lock-boxes enclosing every instrument and a 
plurality of mechanical keys providing access to the lock-boxes. In addition to being 
cumbersome, this mechanical system is costly to implement and to modify in the event keys are 
lost. Other attempts at protecting the programmable features have involved the use of a 
numerical passcode system that will allow access to the protected features by entering the 

15 passcode on a numerical keypad connected to the instrument. While this numerical passcode 
system is effective, some customers and regulatory agencies are not satisfied with the level of 
security provided, as the code can be shared verbally with many people without clear control. 
And in general, there is an increasing need to provide better security. 

SUMMARY OF THE INVENTION 

20 The invention provides increased security in a cost effective manner through use of a 

system comprising a discrete instrument-pass or "key" for each instrument that is to be protected 
from unauthorized tampering. This key provides user access to the instrument's protected 
programmable features. The invention can be an option on existing digital instruments, allowing 
users to change certain protected features, such as the ability to reset zero, delete functions, or 

25 recalibrate the instrument. 
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Various aspects and implementations of the present invention provide various advantages 
over the prior art. For example, a method for operating the instrument-pass system allows 
increased functionality for an instrument using features of the present invention. Yet another 
advantage includes a centralized control mechanism for maintaining access logs, access codes, 

5 and/or authorization lists. In another aspect of the invention, an instrument includes, or is 
coupled to a transmitter that allows the instrument to communicate with a central control system. 
The key allows a user to access the instrument based on the proximity of the key and an access 
module collocated with the instrument. And yet another aspect of the invention, a method 
includes introducing a key to the instrument, and accessing the instrument to manipulate the 

10 instrument's settings. This aspect may include entering a passcode to further allow access to the 
instrument. 

The details of one or more embodiments of the invention are set forth in the 
accompanying drawings and the description below. Other features, objects, and advantages of 
the invention will be apparent from the description and drawings, and from the claims. 

1 5 BRIEF DESCRIPTION OF THE DRAWINGS 

In the drawings: 

Fig. 1 illustrates an access-protected instrument comprising an instrument and an 
instrument-pass. 

Fig. 2 illustrates an access-protected instrument of Fig. 1 communicable with a network. 
20 Fig. 3 is a flow chart illustrating a method for accessing an access-protected instrument of 

Fig. 1. 

Fig. 4 illustrates a logic system for maintaining an access-protected instrument of Fig. 1 

DETAILED DESCRIPTION OF THE ILLUSTRATED EMBODIMENT 

Described in more detail hereinafter is an electronic instrument having an access module 

25 to restrict access to at least one programmable feature of the instrument. The access module is 

responsive to an instrument-pass. For the purposes of this application, the term "instrument" 

includes, but is not limited to, any type of diagnostic or maintenance equipment or device, such 

as a gauge. For simplicity, the term "gauge" is understood to refer to programmable instruments. 

Referring now to the drawings wherein like reference characters denote like or similar parts 

30 throughout the Figures, Fig. 1 illustrates an access-protected gauge system 10. The access- 
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protected gauge system 10 includes an electronic diagnostic gauge 12 having a microprocessor 
14 with at least one programmable feature stored therein and a keypad 16 coupled to the 
microprocessor 14 for programming the programmable features. The diagnostic gauge may be, 
for example, a pressure gauge having the capability to measure pressure, or a temperature gauge 
or other diagnostic gauge. The gauge 12 comprises a display 18 to display measurement data 
and other information. Secured access is provided through an access module 20 that is 
responsive to an instrument-pass 30 when the instrument-pass 30 is brought within a 
predetermined proximity of the access module 20. In one implementation, the user would bring 
the instrument-pass 30 into close proximity to or actual contact with the gauge to gain access. 
Instrument-pass 30 may also have a mechanical connection — such as inserting a key into a 
l oc k_ w ith the access module 20. The instrument-pass 30 is illustrated and may be referred to 
herein as a "key". However, the instrument-pass 30 may assume any configuration and is not 
limited to the configuration of a key illustrated herein. 

A discrete key, or instrument-pass 30, for each gauge 12 or a group of gauges provides 
the user access to at least one protected programmable feature of a gauge 12, such as the ability 
to reset zero, delete features, or recalibrate the gauge. The aforementioned protected 
programmable features are illustrative and not limiting. The gauge 12, being responsive to the 
proximity of the instrument-pass 30, allows the protected features to be modified. In one 
embodiment, the access module 20 enables and disables the keypad 16 in response to the 
proximity of the instrument-pass 30. In another embodiment, access to modify selected 
programmable features is allowed and restricted in response to the proximity of the instrument- 
pass 30. 

The electronic access may be based on at least one of several different technologies, such 
as a radio frequency transponder (RFID), infrared, bar code, magnetic strip, decoding electronic 
device, or a self-contained electronic circuit, whether now known or hereafter developed. 
Additionally, the instrument-pass may simply be a resistor, which when brought within the 
predetermined proximity of the access module, has a value that can be read and a corresponding 
level of access allowed based on the value. Similarly, the instrument-pass 30, depending on the 
particular application, may be a key ring pendant, plastic "wedge" or disk, proximity card or 
"smartcard", infrared module, magnetic strip card, barcode card or a traditional key. 
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Fig. 2 illustrates a diagnostic gauge 12 coupled to a transmitter 22. Referring to Figs. 1 & 
2, upon access by a key 30, microprocessor 14 of gauge 12 may direct remote transceiver 22 to 
communicate with a base transceiver 24 coupled to a workstation 26. Remote transceiver 22 and 
base transceiver 24 may incorporate transmission technologies such as RFID, analog wireless 

5 transmission, packet-based or digital wireless transmission such as asynchronous transfer mode 
(ATM), optical, wireline, web-based (such as Web services communications) or other 
transmission technology that enables one or more remote transceivers 22 to communicate with 
one or more base transceivers 24. 

Workstation 26 may be a personal computer, computer workstation coupled to a larger 

10 network 32, individual database log, or other device capable of processing information to gauge 
12. Additionally, workstation 26 may include any combination of input/output devices, memory 
storage, microprocessors, local storage, or other devices. Workstation 26 may also be coupled to 
network 32, which may be a local area network (LAN), wide area network (WAN), metropolitan 
area network (MAN), optical network, wireless network, portions of the Internet, or any other 

1 5 network capable of transmitting data from one work station to another. 

Network 32 may be coupled to a server or servers 28, which may include workstations 26 
coupled to server 28, and may also include a database, or storage apparatus 34. Workstation 26 
may include local storage, random access memory (RAM), read only memory (ROM), a 
microprocessor, logic unit, or other type of processing device, a display, and/or input/output 

20 devices. Workstation 26 may also include an access module 20 adapted to communicate with an 
instrument-pass 30. 

In one implementation of the invention, digital gauge 12 is accessed by a user. The user 
accesses digital gauge 12 by bringing instrument-pass 30 into a predetermined proximity of 
access module 20 (illustrated in Figure 1). The predetermined proximity required for instrument- 

25 pass 30 to access module 20 may be any predetermined distance, and may additionally include 
inserting the key into a portion of digital gauge 12 that is connected by wire line, optical, radio 
frequency, or other self-contained electronic circuit to access module 20. Access module 20 may 
be operable to access remote transceiver 22 directly, or may relay the access information gained 
by access module 20 through the introduction of instrument-pass 30 to microprocessor 14. 

30 Microprocessor 14 may then direct remote transceiver 22 to transmit access information to a base 
transceiver 24 coupled to work station 26. 
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Workstation 26 may store access information received via base transceiver 24 locally, or 
may transmit the information to a server 28 or another workstation 26 via network 32 for storage 
at a different location. Alternatively, a plurality of digital gauges 12 coupled to remote 
transceivers 22 may be operable to transmit access data to work stations 26 located at other sites, 

5 or at different locations within the same site. When transmitting access data to a server 28, the 
server 28 may store the access data in internal memory storage, such as ROM, RAM, writable 
storage media, or other internal storage device, or server 28 may direct a database 34 to store 
access information categorized by any of a number of criteria for future reference. 

The types of access data that may be transmitted by a gauge 12 to a work station 26 

10 and/or other storage devices coupled to network 32 may include instrument-pass identification, 
instrument-pass user information, settings prior to access by the instrument-pass, settings 
changed as a result of the user accessing the digital gauge with the instrument-pass 30, date, 
time, or any other identifiers which may allow for categorization, retrieval, maintenance, and 
other necessary functions. 

15 In an alternative implementation, a user may bring an instrument-pass 30 into the 

predetermined proximity of an access module 20 coupled to workstation 26. If the programmed 
parameter in the instrument-pass 30 corresponds to the access requirements for a predetermined 
access level, the user obtains a validated entry. Upon validating the use-level associated with 
instrument-pass 30, the access module 20 may allow the user to remotely access any one digital 

20 gauge 12 or multiple digital gauges 12 remote to workstation 26. For example a master 
instrument-pass 30 may allow the user to access every digital gauge 12 coupled to workstation 
26 corresponding to the access level of the instrument-pass 30 used. "Coupled", in reference to 
the number of digital gauges, may include any digital gauge 12 located within transmission 
proximity of workstation 26 via base transceiver 24 and remote transceivers 22. Alternatively, 

25 "coupled" may include any digital gauge 12 communicable with the accessed workstation 26 via 
network 32. 

Additional implementations may require the user to input a code or identification into 
keypad 16 of digital gauge 12 after the user has been granted access via access module 20. For 
example, a user attempting to access a digital gauge by an instrument-pass 30 may bring the 
30 instrument-pass into the pre-determined proximity of access module 20. In this implementation, 
access granted by access module 20 may include merely directing or allowing microprocessor 14 

5 
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to "unlock" or grant access to keypad 16. The user may then be required to enter a personal 
identification number (PIN), user identification, passcode, or other information via keypad 16. 
After the user has entered the PIN or other required information, the microprocessor 14 may 
grant access to the user associated with the instrument-pass 30 used to access the digital gauge 
5 12. 

Another implementation may allow a user to access the digital gauge 12 by accessing an 
access module 20 coupled to a workstation 26. Workstation 26 may then require the user to 
input the user's PIN, user identification, passcode or other information via an input/output device 
that is part of Workstation 26, as described above. 

10 Figure 3 illustrates a method for operating an instrument-pass system 300. At step 310, 

an instrument-pass is introduced to a digital gauge. The introduction of an instrument-pass to a 
digital gauge may include bringing the instrument-pass into a predetermined proximity of the 
digital gauge, or touching the digital gauge. Alternatively, the predetermined proximity may 
include inserting the instrument-pass into a receptacle located on the digital gauge, such as a key 

15 slot, keyhole, card slot, or other receptacle designed to accept the instrument-pass. At step 320, a 
passcode may be required to permit further access, or a specific level of access to the digital 
gauge accessed by the instrument-pass. If, at step 320 a passcode is required, the user enters the 
passcode at step 322. If no passcode is required, then at step 330, additional instrument-passes 
may be required to permit further access to the gauge. If at step 330 additional instrument-passes 

20 are required, then the process returns to step 310 in which a key must be introduced. If at step 
330 no additional key is required, at step 340, access to the gauge is granted and a user may 
manipulate the gauge up to the level of access authorized by the access key. 

Referring to FIG. 4, a logic system for an instrument-pass system 400 includes a 
management system 410. Management system 410 may be a computer workstation (such as a 

25 workstation 26 described above and illustrated in FIG. 2), server, discrete computing device, or 
other system operable to employ various modules for controlling, regulating, or otherwise 
maintaining an instrument-pass system. Management system 410 may be coupled to, or resident 
within, one or more digital gauges 12 and/or network 32, and may include one or multiple 
input/output devices 412, one or more processors 420, one or more data storage devices 430, and 

30 one or more modules 422. 
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Input/output devices 412 may comprise a computer monitor, keyboard, mouse, voice 
recognition device, touch screen, compact disk drive (CDROM), floppy disk drive, or other 
suitable input/output device, such as a transceiver 22 or 24 as illustrated in FIG. 2. Additionally, 
input/output devices 412 may be a workstation 26 illustrated in FIG. 2 having all the 
5 functionality described therewith. Processor 420 may include a microprocessor with resident 
memory such as Read Only Memory (ROM), Random Access Memory (RAM), programmable 
gate arrays, or other suitable processing technology. Additionally, management system 410 may 
include an internal data storage unit 430 such as a hard drive with writable media, recordable 
CDROM (CD-R), re-writable CDROM (CD-RW), and/or an external storage unit 432 such as a 
10 database. 

Modules 422 may provide specific functionality to management system 410 associated 
with pre-programmed functions of each module. For example, modules 422 may provide 
specific functionality such as allowing entry into the system, defining the scope of any access 
granted by the system, and directing the storage and retrieval of information transmitted or 

1 5 received by management system 410. 

Modules 422 illustrated by FIG. 4 include an entry module 424, a function module 426, 
and a storage module 428. Each of the modules 422 may be either programmed into the resident 
memory of processor 420 or may be resident in an input/output device 412 coupled to 
management system 410 and communicable with processor 420. Entry module 424 may protect 

20 access to management system 410, to one or more digital gauges 12, or to management system 
410 and digital gauges 12. Entry module 424 may be programmed with access levels associated 
to various instrument-passes communicable with management system 410. 

Function module 426 may provide functionality associated with manipulating digital 
gauges 12. Function module 426 may allow a user to access records for various digital gauges 

25 12 to determine past programming activities such as the date, time, and nature of any past 
programming activities. Additionally, function module 426 may allow a user to manipulate 
digital gauges 12 remotely via an input/output device 412 coupled to management system 410. 

Storage module 428 may provide functionality associated with storing the passcodes, 
PINs, user identifications, access levels, or other data associated with instrument-passes 30. 

30 Additionally, storage module 428 may be operable to store a log or database listing 
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corresponding to each instrument-pass 30, the digital gauge or gauges 12 accessed, and the 
actions performed with respect to the digital gauges 12 accessed. 

In operation, management system 410 may receive an access transmission via a 
transceiver or local user use of an instrument-pass 30. Upon receiving the transmission, 
5 processor 420 may access one or more of modules 422 to employ the necessary functionality 
programmed into one or more of the modules 422. For example, in one implementation, entry 
module 424 may call on data storage module 428 to determine whether the instrument-pass 30 
used to access the system is appropriate for a digital gauge 12 managed by management system 
410. Additionally or alternatively, entry module 424 may verify the access level associated with 

10 the instrument-pass 30 used to access the system. 

If entry module 424 is programmed to require additional access, such as a user PIN or 
identification, entry module 424 may direct processor 420 to communicate the requirement to a 
user via an input/output device 412, or if the user is attempting to access the gauge 12 at the 
gauge location, then by transmitting a message to the gauge 12 via a base transceiver 24 to a 

15 remote transceiver 22. If the user is attempting to gain gauge access at the digital gauge 12, then 
management system 410 may provide a prompt on display 18 of gauge 12 (see FIG. 1). If the 
user attempts to access a digital gauge or gauges 12 from a workstation 26, then entry module 
424 could direct processor 420 or other suitable element of management system 410 to provide a 
prompt at the workstation 26 accessed by the user, or other suitable input/output device 412. 

20 Once a user enters the required PIN, user identification, or passcode, processor 420 may 

call on function module 426 to provide the functionality desired by the user. Examples of 
functionality provided by function module 426 may include resetting a gauge or gauges 12, 
opening or closing valves controlled by a gauge 12, or inputting values for gauge 12 operation. 
Additionally, function module 426 may simultaneously employ the functionality of entry module 

25 424 for each function performed by management system 410 or a user to ensure that the function 
performed is within the access level associated with the instrument-pass 30 used to gain access to 
the system 400. In this or another implementation, function module 426 may call on storage 
module 428 to record the actions of management system 410, functions performed by a user 
accessing management system 410, or the functions of gauge 12 altered or manipulated as a 

30 result of access granted by management system 410. 
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Storage module 428 may control data storage in data storage 430 or in external data 
storage such as database 432. In an implementation, processor 420 may monitor the functions of 
management system 420 and direct storage module 428 to store or update storage information in 
data storage 430 or database 432. Examples of data that may be stored by storage module 428 
5 are date and time of access, level of access, the identification of the instrument-pass 30 used to 
gain access, functions accessed by management system 410, and/or actions performed on gauge 
12. Additionally, storage module 428 may be operable to recall stored information when 
requested by processor 410 as a result of input from an input/output device 420 or by a 
preprogrammed element of function module 426 or storage module 428, such as a random report 
10 or a periodic report. 

As described above, electronic instrument-pass technology may provide better control 
over gauge access than the passcode or lock-box approaches currently in use. An instrument- 
pass system is also much easier to implement than installing mechanical lock-boxes around each 
gauge. 

15 In alternate implementations of the instrument-pass system, gauges may be programmed 

to accept multiple levels of keys, such that one key is provided for every gauge in a room of a 
plant, a master key is provided for every gauge in that building, and a grand master is provided 
for every gauge in the customer's plant. 

Although preferred and alternate embodiments of the present invention have been 

20 disclosed in the foregoing Detailed Description, it will be understood that the invention is not 
limited to the implementations disclosed, but is capable of numerous rearrangements, 
modifications, and substitutions without departing from the spirit of the invention. 
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